Security Scan Report: supprtrcb-dpldxysyz96q.edgeone.dev

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 7 domains to perform 9 HTTP transactions. The main domain is edgeone.dev and was registered 1 year 5 months ago.

Submitted URL: https://supprtrcb-dpldxysyz96q.edgeone.dev/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed WeTransfer phishing: a look-alike file-download page on an edgeone.dev subdomain collects email and password and carries a Telegram bot token for exfiltration. Do not enter credentials.

Risk Factors (5)
Impersonation of the WeTransfer brand on a non-official domain
Credential-harvesting login form (email + password) gating a fake download
Embedded Telegram bot token enabling exfiltration of submitted credentials
Fake file-transfer/download page used as a phishing lure with expiry urgency
Hosted on a free instant-publishing edgeone.dev subdomain with unknown creation date
Domain age information unavailable

Details

Page Title

WeTransfer

Scan Type

public

Domain Name Analysis

The domain 'supprtrcb-dpldxysyz96q.edgeone.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'supprtrcb-dpldxysyz96q'. The registrable portion 'edgeone' spans 7 characters holding four vowels versus three consonants. Word splitting yields two words: edge, one. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

® Files Ready for Download 3 files, 36.21 MB, Transfer expires in 7 days Company_Profile.pdt @ [R) | Order_List-764833.pat @ 421MB 5MB Specifications.mp4 27M 12) Login to Download Files Just one...

Page Load Overview

1.43s
Total Load Time
255 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:612 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
62%
download file sharing
53%
technology software
36%
documentation technical
31%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
943.174.247.29Singapore
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.13.95Google · CDNUnited States
AS15169Google LLC
0104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0208.95.112.1United States
AS53334Total Uptime Technologies, LLC
043.174.246.29Singapore
0104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
0104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
910--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FBE44A35A75A1C05DAABDAA9B481BE643C309D73C943C0D8F290B35E8ACF13547EDB25

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:UkTBMXfRWZEqaNuWEO1iJD5WvLPGAoaov:UCjZEqMuWEO1iJD5Wvw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:692253:QCR4AACmrFUIBYBQYAsoQrHIBiOYEgrOCEiUhuUhE4BAgQQgQGAiCCAOQggHWDATKZgCxDVGBIBo0QRIahEiGIoIIWAOwQVi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f0f87c7cf07270f
Perceptual Hash:b33c8dcdcc33388c
Difference Hash:febc9d8cac88cafc
Wavelet Hash:1f0f0707cf070f0f
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data